OP
Product
opentelemetry-ebpf-instrumentation
11
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add opentelemetry-ebpf-instrumentation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41433 | 8.4 | Apr 24 | OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR Affected: >= 0.4.0, < 0.8.0 |
| CVE-2026-45686 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI Affected: >= 0.7.0, < 0.9.0 |
| CVE-2026-45685 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages Affected: >= 0.1.0, < 0.9.0 |
| CVE-2026-45680 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU Affected: < 0.9.0 |
| CVE-2026-45678 | 7.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads Affected: < 0.9.0 |
| CVE-2026-45679 | 6.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages Affected: < 0.9.0 |
| CVE-2026-45681 | 5.9 | Jun 2 | OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size Affected: < 0.9.0 |
| CVE-2026-45676 | 5.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent Affected: < 0.9.0 |
| CVE-2026-45682 | 5.5 | Jun 2 | OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals Affected: < 0.9.0 |
| CVE-2026-45684 | 5.3 | Jun 2 | OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers Affected: >= 0.7.0, < 0.9.0 |
| CVE-2026-45683 | 3.8 | Jun 2 | OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure Affected: < 0.9.0 |
Showing 11